Privacy Policy for Eklore.in

Last Updated: 14th April 2026
Effective Date: 14th April 2026

This Privacy Policy explains how Eklore (“we,” “us,” or “our”) collects, uses, stores, protects, and shares your information when you visit Eklore.in (the “Website”), make a purchase, contact us, or otherwise interact with our services.

This policy is prepared in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

By accessing or using our Website, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy.

1. About Us

Eklore is a sole proprietorship business engaged in sustainable clothing and fashion retail through its website, Eklore.in. The brand name “Eklore,” along with its logo, creative assets, product imagery, and related branding materials, are proprietary intellectual property and protected business assets.

For the purposes of the DPDP Act, 2023, Eklore acts as the Data Fiduciary with respect to the personal data collected through the Website.

2. Information We Collect

2.1 Information You Provide Directly

When you place an order, create an account, contact us, subscribe to updates, or use Website features, we collect:

• Full name
• Email address
• Phone number
• Billing and shipping addresses
• Order details and purchase history
• Communications with our customer support team
• Product reviews, feedback, or testimonials you submit

2.2 Payment Information

Payments are processed securely through authorised third-party payment gateways such as Razorpay. We do not store complete card numbers, CVV details, UPI PINs, or net banking credentials on our servers. Only limited transaction references (such as order ID, payment status, and transaction ID) are retained for record-keeping.

2.3 Information Collected Automatically

When you use the Website, we automatically collect:

• IP address and approximate location
• Browser type and version
• Device information and operating system
• Pages viewed and time spent
• Date and time of access
• Referral links and browsing behaviour
• Cookies and similar tracking data

2.4 Information from Third Parties

If you sign in or interact via Google, Facebook, Instagram, or other social platforms, we receive limited profile information (such as name, email, or profile image) based on the permissions you authorise.

3. How We Use Your Information

We use your information for the following purposes:

• Processing orders, confirming payments, and arranging shipping
• Managing returns, exchanges, and refunds
• Providing customer support and responding to enquiries
• Sending transactional updates (order confirmations, dispatch alerts, delivery notifications)
• Improving Website functionality, performance, and user experience
• Analysing visitor behaviour through analytics tools
• Detecting and preventing fraud, abuse, or unauthorised activity
• Complying with applicable legal, tax, and regulatory obligations
• Sending marketing communications about new launches, offers, or brand updates only with your consent, which you may withdraw at any time

4. Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data based on:

• Consent– which you provide when placing an order, creating an account, or subscribing to communications
• Legitimate uses– such as fulfilling orders, providing customer support, complying with law, and protecting our business interests

You may withdraw consent at any time by contacting us using the details in Section 14. Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal.

5. Sharing of Information

We do not sell your personal information to third parties.

We share limited information only where necessary, with:

• Payment gateways (e.g., Razorpay) for processing transactions
• Logistics and courier partners for order fulfilment and delivery
• Website hosting and infrastructure providers
• Analytics and marketing platforms (e.g., Google Analytics, Meta Pixel) where applicable
• Professional advisors such as accountants, auditors, and legal consultants
• Government authorities, regulators, or law enforcement when required by law, court order, or legal process

All third parties are expected to maintain appropriate confidentiality and data protection standards.

6. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies, which fall into the following categories:

• Essential cookies– required for core functions like cart, checkout, and login
• Performance and analytics cookies– help us understand how visitors use the Website
• Marketing cookies– support advertising and remarketing where applicable
• Preference cookies– remember your language, region, or display settings

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect Website functionality.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy. Typical retention periods include:

• Order and transaction records– retained for at least 8 years to comply with Indian tax and accounting laws
• Account information– retained while your account is active
• Marketing data– retained until you withdraw consent
• Support communications– retained for up to 3 years for service quality and dispute resolution

Once retention is no longer required, data is securely deleted or anonymised.

8. Data Security

We implement reasonable technical and organisational measures to protect your information, including:

• SSL/TLS encryption for data transmission
• Secure hosting infrastructure
• Restricted internal access on a need-to-know basis
• Secure payment processing through PCI-DSS compliant gateways
• Periodic review of security practices

While we take data protection seriously, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential.

9. Data Breach Notification

In the event of a personal data breach that is likely to affect your rights, we will notify the Data Protection Board of India and affected users in accordance with the requirements of the DPDP Act, 2023.

10. Children's Privacy

The Website is intended for individuals 18 years of age and above. We do not knowingly collect personal data from children. If a parent or guardian believes a child has provided us with personal information, please contact us and we will take steps to delete such information promptly.

Where processing of a child's data is unavoidable, we will obtain verifiable parental consent as required under the DPDP Act, 2023.

11. Your Rights

Subject to applicable law, you have the right to:

• Access– request a summary of personal data we hold about you
• Correction– request correction of inaccurate or incomplete data
• Erasure– request deletion of your data, where legally permissible
• Withdraw consent– for marketing or other consent-based processing
• Nominate– appoint another individual to exercise your rights in case of death or incapacity
• Grievance redressal– raise concerns with our Grievance Officer (Section 14)
• File a complaint with the Data Protection Board of India if you are not satisfied with our response

To exercise any of these rights, please contact us using the details in Section 14. We will respond within the timelines required by law.

12. Third-Party Links

Our Website may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices, security, or content of those external platforms. We encourage you to review their privacy policies before sharing any information.

13. International Users and Data Transfers

If you access the Website from outside India, you understand that your information will be transferred to, stored in, and processed in India, where our servers and operations are based. By using the Website, you consent to such transfer and processing.

14. Grievance Officer and Contact Details

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the contact details of our Grievance Officer are:

Grievance Officer: Kavya Nagpal
Email: customercare@eklore.in
Address: 750, Janakpuri, Bareilly, Uttar Pradesh, 243122
Response Time: We aim to acknowledge complaints within 48 hours and resolve them within 30 days.

For all privacy-related queries, data access requests, consent withdrawal, or grievances, please write to us at customercare@eklore.in.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, business operations, or regulatory requirements. The updated version will be posted on this page along with the revised “Last Updated” date. We encourage you to review this policy periodically.

For material changes, we will provide additional notice (such as via email or a Website banner) where required by law.

16. Consent

By using this Website, placing an order, or submitting your information to us, you confirm that you have read this Privacy Policy and consent to the collection, use, and sharing of your information as described.

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts at Bareilly, India.